Toolbox App at a glance
- Last 12 months
- 4
- Critical · all time
- 1
- Exploited · all time
- 0
- Public exploit · all time
- 0
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 3 | 0 |
| Oct 2026 | 1 | 1 |
| Sep 2026 | 0 | 0 |
| Aug 2026 | 0 | 0 |
| Jul 2026 | 0 | 0 |
| Jun 2026 | 0 | 0 |
| May 2026 | 0 | 0 |
| Apr 2026 | 0 | 0 |
| Mar 2026 | 0 | 0 |
| Feb 2026 | 0 | 0 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 0 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 0 | 0 |
| Jun 2025 | 0 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 4 | 0 |
| Mar 2025 | 0 | 0 |
| Feb 2025 | 0 | 0 |
| Jan 2025 | 0 | 0 |
| Dec 2024 | 0 | 0 |
Latest advisories
-
Medium max 7.5WID-SEC-2026-4393 2 CVEs
JetBrains Toolbox App: Mehrere Schwachstellen
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JetBrains Toolbox App ausnutzen, um beliebigen Programmcode auszuführen oder Informationen offenzulegen.
-
High max 9.0WID-SEC-2026-4280 1 CVE
JetBrains Toolbox App: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in JetBrains Toolbox App und JetBrains IntelliJ IDEA ausnutzen, um Sicherheitsvorkehrungen zu umgehen.
10 results · Feed
-
Medium 6.5
In JetBrains Toolbox App before 3.6.1 nTLM hash disclosure was possible via SVG tool icons from a Remote Development se…
-
High 7.5
In JetBrains Toolbox App before 3.6.1 command injection was possible via enterprise configuration URLs
-
Low 3.1
In JetBrains Toolbox App before 3.9 insufficient warning in the login dialog allowed connecting to a malicious server
-
Critical 9.0
In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA, PyCharm, PhpStorm, RubyMine, WebStorm, GoLand and Rider…
-
High 8.3
In JetBrains Toolbox App before 2.6 command injection in SSH plugin was possible
-
Medium 6.1
In JetBrains Toolbox App before 2.6 the SSH plugin established connections without sufficient user confirmation
-
Medium 6.9
In JetBrains Toolbox App before 2.6 unencrypted credential transmission during SSH authentication was possible
-
Medium 4.2
In JetBrains Toolbox App before 2.6 host key verification was missing in SSH plugin
-
Medium 5.3
In JetBrains Toolbox App before 2.2 a DoS attack was possible via a malicious SVG image
-
Medium 5.2
In JetBrains Toolbox App before 1.28 a DYLIB injection on macOS was possible